·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 4. Review findings remaining: 10.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open |
1 finding
This skill provides instructions on how to interact with Agent Platform RAG
Engine using the Agent Platform Python SDK. You MUST use the vertexai Python
SDK to perform RAG Engine operations, rather than raw REST calls or MCP tools,
because this code is intended to be run by external clients.
Before executing any commands or scripts on behalf of the user, you must adhere to the following safety tiers based on the action requested:
Tier R: Read-only (list_corpora, list_files, get_corpus,
retrieval_query)
Tier RC: Read-only but consumes Compute Resources
(client.models.generate_content)
Requires interactive confirmation with 'Yes'/'No' options before executing grounded content generation. The confirmation prompt MUST clearly explain the proposed generation execution and its key parameters (e.g., target corpus ID, query text, target model). Natural-language paraphrases without specifying exact parameters are insufficient, as explicit parameter listing is required to ensure unambiguous user approval of the specific resource and configuration.
Same-turn restriction: Do not execute the generation code in the same turn as presenting the confirmation prompt. Stop and wait for the user's reply; only execute after explicit 'Yes' / approval.
Gold Standard Example:
CRITICAL: Before running any of the Python snippets below, you must ensure the environment is correctly initialized by following these steps:
Google Cloud Authentication: Authenticate with your Google Cloud credentials and configure active Application Default Credentials (ADC) for Agent Platform access:
Python Dependencies: This skill needs google-cloud-aiplatform and
google-genai, which the sandbox already provides. Do not create a
virtual environment — it starts empty and hides packages the environment
already provides, forcing a redundant install. Do not spend a separate
command checking for them: run the snippet directly
Execution: Run each snippet as a quoted heredoc, python3 - <<'PY' ...
PY, rather than python3 -c '...', whose nested quotes break easily.
There is no environment to activate first.
Information Gathering: Has the user provided the Project ID, Region, and Corpus ID?
Task Type: What does the user want to do?
If you do not know the Resource Name of the corpus or file, you MUST list them first to discover them. The SDK handles pagination automatically when converted to a list.
To understand what files (and types) are in a corpus, list them and inspect the
display_name (usually includes the extension).
To retrieve details about an existing Agent Platform RAG Engine corpus:
To retrieve relevant contexts from a RAG Engine corpus based on a query. If no contexts come back, that is a valid answer: report it with the corpus and query you used.
To use the retrieved context alongside an Agent Platform model to generate a grounded response:
Get started with chainctlchainctl skill install public/google/agent-platform-rag-engine-management:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/google/skills/cloud/agent-platform-rag-engine-management:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md